Does pcalua.exe interact with BIOS or UEFI during startup?

... pcalua.exe","PowerShell.EXE","RegAsm.exe","RegSvcs.exe","REGSVR32.exe ... EXE” Process and Its Command Line Options. Understanding the “svchost.exe ... Aug 12, 2024 ... Use of Pcalua For Execution ... Share on: Detects execition of commands and binaries from the context of The program compatibility assistant ( ... The group employs unique tactics, including the use of pcalua.exe for indirect command execution, scheduled tasks mimicking legitimate Windows processes, and ... Feb 13, 2025 ... ... exe. The "action" for the task is as follows: Action: Start a Program; Details: C:\Windows\system32\pcalua.exe -a rundll32 -c shell32.dll ... Jun 28, 2010 ... pcalua.exe is the Program Compatibility Assistant. "The Program Compatibility Assistant is an automatic feature ofWindows that runs when it ... Jan 23, 2021 ... For example, Forfiles, the Program Compatibility Assistant (pcalua.exe) ... PCALUA is nowhere in the Process Explorer since Defender Kills ... Mar 15, 2018 ... Pcalua.exe. 10.0.10240.17738. 27,648. 01-Jan-2018. 23:20. x64. Pcasvc.dll. 10.0.10240.17770. 488,792. 10-Feb-2018. 07:19. x64. Aitstatic.exe. Jan 23, 2021 ... Indirect command execution with pcalua.exehttps://t.co/UWVoSOUUxU pic.twitter.com/NNycLbRuPu. — Check Point Research (@_CPResearch_) ... Nov 7, 2024 ... this is interesting, adversaries are currently utilising the Program Compatibility Assistant Service (pcalua.exe) in Windows to enable ... ... pcalua\.exe.*|.*odbcconf\.exe.*|.*msiexec\.exe.*|.*mshta\.exe.*|.*msdt\.exe ... Where Clause: "Process Name" IMATCHES '.*atbroker\.exe.*|.*bash\.exe ...